$ rpki-client -vvf repo-rpki.idnic.net/repo/f4293c64-ea00-413f-9090-2b190b1a45af/0/F2CC4B38295BA8B211B55A53DA0ACB76DA636E70.mft File: F2CC4B38295BA8B211B55A53DA0ACB76DA636E70.mft (raw, json) Hash identifier: I5pkDsCeknXSBjWCi8kM3NvohqtCOTsZ2EorVhNq6p4= Subject key identifier: E1:D0:16:C3:46:C4:F2:F9:A0:48:65:83:C9:1A:63:5D:A3:53:1E:DD Authority key identifier: F2:CC:4B:38:29:5B:A8:B2:11:B5:5A:53:DA:0A:CB:76:DA:63:6E:70 Certificate issuer: /CN=F2CC4B38295BA8B211B55A53DA0ACB76DA636E70 Certificate serial: 3BFD4A69261FA8260C0E4D3D27428F678C480F4B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F2CC4B38295BA8B211B55A53DA0ACB76DA636E70.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f4293c64-ea00-413f-9090-2b190b1a45af/0/F2CC4B38295BA8B211B55A53DA0ACB76DA636E70.mft Manifest number: 038D Signing time: Fri 22 Aug 2025 06:32:03 +0000 Manifest this update: Fri 22 Aug 2025 06:27:03 +0000 Manifest next update: Mon 25 Aug 2025 16:41:03 +0000 Files and hashes: 1: 3130332e3136382e34372e302f32342d3234203d3e20313432333130.roa (hash: nH/6GtgoV/9v3sMWYjneb+fyVV81krMAog9BySpXr4E=) 2: 3130332e3136382e34362e302f32342d3234203d3e20313432333130.roa (hash: LxlhGvniVX1DZYQ1W62yOkB/KkKuWv10+O7NsPderxM=) 3: F2CC4B38295BA8B211B55A53DA0ACB76DA636E70.crl (hash: kXQNdDF3ylVzqC1HfRrT3d3ti3coGq+8UiI7dj3eBm0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f4293c64-ea00-413f-9090-2b190b1a45af/0/F2CC4B38295BA8B211B55A53DA0ACB76DA636E70.crl rsync://repo-rpki.idnic.net/repo/f4293c64-ea00-413f-9090-2b190b1a45af/0/F2CC4B38295BA8B211B55A53DA0ACB76DA636E70.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F2CC4B38295BA8B211B55A53DA0ACB76DA636E70.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Aug 2025 16:41:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3b:fd:4a:69:26:1f:a8:26:0c:0e:4d:3d:27:42:8f:67:8c:48:0f:4b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F2CC4B38295BA8B211B55A53DA0ACB76DA636E70 Validity Not Before: Aug 22 06:27:03 2025 GMT Not After : Aug 25 16:41:03 2025 GMT Subject: CN=E1D016C346C4F2F9A0486583C91A635DA3531EDD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:b2:0e:61:7d:50:b0:d6:9d:b8:3f:a4:55:82: 57:c6:4f:eb:39:3d:07:b5:93:8b:20:96:25:dc:ce: 89:c8:81:e5:26:f9:c7:b8:a1:d9:22:ff:a4:1e:d8: a2:7a:9c:0c:5e:45:7e:60:57:d1:3b:b5:d6:f2:7e: e1:14:38:ac:ac:41:c4:38:01:6a:6e:91:e7:b8:61: 79:82:dc:75:77:c8:ac:6a:32:ed:12:08:db:ae:26: 3a:a1:d7:89:42:d9:35:0d:41:9b:1d:f2:d4:2c:29: 4e:99:fb:b6:6f:b1:12:d6:f4:85:0d:02:c7:66:e0: 7a:1e:d0:d1:ea:12:6b:dd:f0:9e:1d:1e:ce:ee:fd: f7:30:82:ba:fa:f9:b4:d3:47:50:8e:d6:58:41:36: 31:36:ac:b1:6e:74:c8:60:ba:c7:bc:02:0f:69:60: 5e:13:d6:2a:98:ee:15:1a:e6:38:18:6b:66:19:aa: b1:4d:0d:2c:39:1f:15:48:06:ae:3b:53:64:28:7c: 61:e1:1d:ae:3f:c8:17:dd:76:d0:bd:6d:49:1f:21: 1e:72:89:1e:49:94:ce:5a:22:62:33:7c:ce:9c:b0: 18:bb:50:bd:7e:9a:3b:0d:e6:6b:8d:ee:c7:38:10: d6:43:1f:49:77:6d:d9:0a:0f:be:a2:a7:05:e4:f0: 8c:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:D0:16:C3:46:C4:F2:F9:A0:48:65:83:C9:1A:63:5D:A3:53:1E:DD X509v3 Authority Key Identifier: keyid:F2:CC:4B:38:29:5B:A8:B2:11:B5:5A:53:DA:0A:CB:76:DA:63:6E:70 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f4293c64-ea00-413f-9090-2b190b1a45af/0/F2CC4B38295BA8B211B55A53DA0ACB76DA636E70.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F2CC4B38295BA8B211B55A53DA0ACB76DA636E70.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f4293c64-ea00-413f-9090-2b190b1a45af/0/F2CC4B38295BA8B211B55A53DA0ACB76DA636E70.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 84:14:f2:6a:25:bc:7c:d0:06:64:eb:da:3c:69:98:cc:a3:d7: a5:00:96:71:f6:4a:2a:44:cc:ae:d1:bc:22:e8:71:c3:e2:df: 0e:20:96:ca:25:96:48:19:e9:2f:62:d9:bc:dc:28:cc:54:ca: 69:fa:9c:3b:c1:62:af:a9:cf:74:c7:fa:e6:ce:a6:28:94:f5: 45:ab:3f:46:73:ab:37:92:16:c4:f5:d0:d4:c0:0c:9e:f7:74: 4a:da:6e:ce:ca:33:13:74:ff:8f:a2:14:0d:a9:b8:55:62:d1: f0:f4:e7:26:70:67:90:6f:0f:01:74:88:58:6b:7d:0f:e2:3d: b3:d2:63:08:2f:7c:32:fd:28:be:18:ed:44:cd:69:a0:f6:10: a5:03:46:72:e9:b5:5b:8c:be:33:62:e4:d2:50:5f:81:1e:28: d6:91:3e:c9:b2:b3:d5:c6:b0:65:92:6f:9c:b6:52:4d:a8:bb: 8f:bd:5f:d8:1a:89:73:53:71:92:83:a3:5d:e6:cc:15:ea:5f: d3:48:ab:b9:79:81:2f:02:b0:06:43:cd:8a:de:ae:31:25:5a: bc:ba:f2:01:a7:5d:b5:a9:fc:64:e8:70:fc:20:a8:47:24:04: 98:9b:32:05:35:39:74:17:f0:34:01:58:8d:60:0d:15:01:77: ed:ee:22:d9 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUO/1KaSYfqCYMDk09J0KPZ4xID0swDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjJDQzRCMzgyOTVCQThCMjExQjU1QTUzREEwQUNCNzZE QTYzNkU3MDAeFw0yNTA4MjIwNjI3MDNaFw0yNTA4MjUxNjQxMDNaMDMxMTAvBgNV BAMTKEUxRDAxNkMzNDZDNEYyRjlBMDQ4NjU4M0M5MUE2MzVEQTM1MzFFREQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBsg5hfVCw1p24P6RVglfGT+s5 PQe1k4sgliXczonIgeUm+ce4odki/6Qe2KJ6nAxeRX5gV9E7tdbyfuEUOKysQcQ4 AWpukee4YXmC3HV3yKxqMu0SCNuuJjqh14lC2TUNQZsd8tQsKU6Z+7ZvsRLW9IUN Asdm4Hoe0NHqEmvd8J4dHs7u/fcwgrr6+bTTR1CO1lhBNjE2rLFudMhguse8Ag9p YF4T1iqY7hUa5jgYa2YZqrFNDSw5HxVIBq47U2QofGHhHa4/yBfddtC9bUkfIR5y iR5JlM5aImIzfM6csBi7UL1+mjsN5muN7sc4ENZDH0l3bdkKD76ipwXk8IzvAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU4dAWw0bE8vmgSGWDyRpjXaNTHt0wHwYDVR0j BBgwFoAU8sxLOClbqLIRtVpT2grLdtpjbnAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m NDI5M2M2NC1lYTAwLTQxM2YtOTA5MC0yYjE5MGIxYTQ1YWYvMC9GMkNDNEIzODI5 NUJBOEIyMTFCNTVBNTNEQTBBQ0I3NkRBNjM2RTcwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRjJDQzRCMzgyOTVCQThCMjExQjU1QTUzREEwQUNCNzZEQTYz NkU3MC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjQyOTNjNjQtZWEwMC00MTNmLTkw OTAtMmIxOTBiMWE0NWFmLzAvRjJDQzRCMzgyOTVCQThCMjExQjU1QTUzREEwQUNC NzZEQTYzNkU3MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIQU8molvHzQBmTr2jxpmMyj16UAlnH2SipE zK7RvCLoccPi3w4glsollkgZ6S9i2bzcKMxUymn6nDvBYq+pz3TH+ubOpiiU9UWr P0ZzqzeSFsT10NTADJ73dErabs7KMxN0/4+iFA2puFVi0fD05yZwZ5BvDwF0iFhr fQ/iPbPSYwgvfDL9KL4Y7UTNaaD2EKUDRnLptVuMvjNi5NJQX4EeKNaRPsmys9XG sGWSb5y2Uk2ou4+9X9gaiXNTcZKDo13mzBXqX9NIq7l5gS8CsAZDzYrerjElWry6 8gGnXbWp/GTocPwgqEckBJibMgU1OXQX8DQBWI1gDRUBd+3uItk= -----END CERTIFICATE-----Generated at Sat Aug 23 14:08:02 2025 by rpki-client